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1. General Description 


The W90210F Embedded Controller is part of Winbond s W90K Embedded processor family. The processor 
is a high-performance, highly integrated 32-bit processor intended for a wide range of embedded applications, such as 
set-top box, web browser, X-terminal, and visual/data communication devices.. 

The WS0210F CPU core is based on the HP PA-RISC architecture and is upward code compatible with the 
WS90K. The PA-RISC architecture incorporates traditional RISC elements, such as instruction pipelining, a register-to- 
register instruction set and a large, general-purpose register file. Separate on-chip instruction and data caches allow the 
W90210F to fetch an instruction and access data in a single processor cycle. 

The W$0210F includes several features that greatly increase performance, reduce system component count 
and ease the overall system design task. In addition to its cache memories, the W90210F s on-chip support features 
include a DRAM controller, ROM/FLASH ROM interface, PCI bridge, DMA controller, two serial ports with FIFO, IEEE 
1284 parallel port, timer/counters, and enhanced debug support- all features that are commonly required in embedded 
applications. 
Figure 1.1 shows the system diagram of W90210F. 
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Figure 1.1 W90210F System Diagram 
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2. Features 


Main features of the W90210F 
* PA-RISC architecture 
PA-RISC 1.1 third edition instruction set 
PA-RISC level zero implementation 
Support PA-RISC Multimedia Extension 1.0 instruction set 
W90K binary compatible for user software 
¢ High-performance implementation 
Five-stage pipeline 
Precise, efficient handling of pipeline stalls and exceptions 
Delayed branch with static branch prediction 
Forward: not taken 
Backward: taken 
One-cycle stall when prediction is wrong 
HIT under miss 
Both load and store can be queued when miss 
Load/store single cycle execution after previous miss 
* On-chip cache memory 
Internal |-cache: Direct mapped, 4 KB cache (256 entries, four words/entry) 
Wrap around fetching when cache miss 
Cache freeze capability 
Internal D-cache: 2-way set associative, 2 KB cache 64 entries, four words/entry) 
Write-back cache with write buffer 
Write-through option 
New line send to CPU before dirty line write back 
*® Enhanced debug capability 
Debug SFU supports both instruction breakpoints and data breakpoints 
® High on-chip integration and simple I/O interface 
486-like bus interface for CPU core 
Memory controller to support four banks of DRAM and ROM/FLASH ROM 
2-channel 8-bit DMA controller 
PCI bridge 
Two Serial ports with FIFO 
Extended Capabilities Port (ECP) 
Two 24-bit timer/counters 
« Power Down mode 
Provide power down mode for power saving operation 
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4. W90210F Pin Description 


PIN Name DESCRIPTION 


CPU Signal 

RST 
POLK 
OSC 
PCI LOCAL BUS for more detail description of the PCI signals please refer to the PCI LOCAL BUS 
SPECIFICATION 

PCI Interrupt input, level senstive, low active signal. Once the 
INTx# signal is asserted, it remains asserted until the device drivq 
clear the pending request. When the request is cleared, the devic| 
deasserts its INTx# signal. 


PREQ1# desires use of the bus. 
GNT1# has been granted. 


PLOCK# PCI Lock signal, indicates an atomic operation that may require 
multiple transactions to complete. When PLOCK¢# is asserted, 
non-exclusive transactions may proceed to an address that is not 
currently locked 

PCI Reset output, is used to bring PCI-specific registers, 
sequencers, and signals to a consistent state. Low active. 


7 
PCICLK PCI Clock output, provides timing for all transactions on PC and 
an input to every PCI device. 
3 


SERR# 6 PCI System Error is for reporting address parity errors, data parit 
errors on the Special Cycle command, or any other system error 
where the result will be catastrophic. The assertion of SERR# is 
synchronous to the clock and meets the setup and hold times of 
all bused signals. 

PCI Parity Error is only for the reporting of data parity errors duri 
all PCI transactions except a Special Cycle. The PERR# pin is 
sustained tri-state and must be driven active by the agent receivi 
data two clocks following the data when a data parity error is 
detected. The minimum duration of PERR# is one clock for each 
data phase that a data parity error is detected. An agent cannot 
report a PERR# until it has claimed the access by asserting 
DEVSEL# (for a target) and completed a data phase or is the 
master of the current transaction. 


PCIRST# 2 
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PDA[3 1:0] ns state | 34-38, 40-41, 43, PCI tri-state Address/Data bus, Address and Data are multiplexed 
45-52, 68-75, 78- on the same PCI pins. A bus transaction consists of an address 
79, 81-86 phase followed by one or more data phases. PC! supports both 

read and write bursts. The address phase is the clock cycle in 
which FRAME# is asserted. During the address phase PDA[31:0] 
contain a physical address. During data phases PDA[7:0] contai 
the least significant byte (Isb) and PDA[31:24] contain the most 
significant byte (msb). Write data is stable and valid when IRDY# 
asserted and read data is stable and valid when TRDY# is 
asserted. Data is transferred during those clocks where both 
IRDY# and TRDY# are asserted. 


STOP# PCI Stop indicates the current target is requesting the master to 
stop the current transaction. 


TRDY# PCI Target Ready indicates the selected device = ability to 
complete the current data phase of the transaction. A data phase 
is completed on any clock both TRDY# and IRDY# are sampled 
asserted. During a read, TRDY# indicates that valid data is prese 
on PDA[31:0]. During a write, it indicates the target is prepared tq 
accept data. Wait cycles are inserted until both IRDY# and TRD 
are asserted together. 

DEVSEL# PCI Device Select, when actively driven, indicates the driving 
device has decoded its address as the target of the current 
access. As an input, DEVSEL# indicates whether any device on 
the bus has been selected. 


C/BE[3:0]# 44,53,66,76 PCl Bus Command and Byte Enables are multiplexed on the 
same PCI pins. During the address phase of a transaction, 
C/BE[3:0]# define the bus command. During the data phase 
C/BE[3:0]# are used as Byte Enables. The Byte Enables are valid 
for the entire data phase and determine which byte lanes carry 
meaningful data. C/BE[0]# applies to byte 0 (Isb) and C/BE[3]# 


PCI Cycle Frame is diver by the current master to indicate the 
beginning and duration of an access. FRAME# is asserted to 
indicate a bus transaction is beginning. While FRAME# is 
asserted, data transfers continue. When FRAM# is deasserted, 


—_ 

the transaction is in the final data phase or has completed. 

IRDY# PCI Initiator Ready indicates the bus master s ability to completa 
the current data phase of the transaction. A data phase is 
completed on any clock both IRDY# and TRDY# are sampled 
asserted. During a write, IRDY# indicates that valid data is prese' 
on PDA[31:0]. During a read, it indicates the master is prepared t 
accept data. Wait cycles are inserted until both IRDY# and TRD 
are asserted together. 


PCI Parity is even parity across PDA[31:0] and C/BE[3:0]#. PPAF 
is stable and valid one clock after the address phase. For data 
phases, PPAR is stable and valid one clock after either IRDY# is 
asserted on a write transaction or TRDY# is asserted on a read 
transaction. (PPAR has the same timing as PDA[31:0], but it is 
delayed by one clock.) The mater drives PPAR for address and 
write data phases; the target drives PPAR for read data phase. 


DMA Interface 
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133 channel 0 (DREQO) or DMA channel 1 (DREQ1). 

DMA Acknowledge signals acknowledge an external transfer on 

DACK1 DMA channel 0 (DREQO) or DMA channel 1 (DREQ1). 

DMARDY DMA Device Ready signal is used to extend the length of DMA 
bus cycles. If a device wants to extend the DMA bus cycles, it wil 
force the DMARDY signal low when it decodes its address and 
receives a IOR or IOW command. 

DMA Chip Select signals select the corresponding I/O devices fo 
programming or DMA transfers. 

12-bit DMA I/O Address Bus, bit 0 is the most significant bit. 
present bus cycle is an I/O read cycle. 
present bus cycle is an I/O write cycle. 
Terminal count for DMA channels, the pin is driven active for one 
clock when byte count reaches zero and after the last transfer for| 
a DAM has completed. 

ECP Interface For more detail description of the ECP interface signals, please 

refer to the IEEE P1284 Standard 
PBusy tz ECP busyinputsignal 
pnfautt 39 ECP fauttinput 
Prack tg ECP acknowledge input 
pPerror TE tat ECP parityeror 
Pselect_ tte ecP Select 
|nSelectin Ss fO tsa ECP selectoutput 
point PO tsa CP initialization 
prautoFd TO 55 CL ECP Autofeed 
|nStobe Oss CP Strobe 


ED[O:7] 152-148,146- Bi-directional ECP Data bus, ED[0] is the most significant bit 
145,143 msb). 


Memory Controller Interface 


RAS#(0:3] 201-204 DRAM Row Address Strobe, Banks 0-3. These signals are used 
to select the DRAM row address. A High-to-Low transition on ane 
of these signals causes a DRAM in the corresponding bank to 
latch the row address and begin an access. 

CAS#[0:3] 195,197-198,200 DRAM Column Address Strobes, Byte 0-3. These signals are 
used to select the DRAM column address. A High-to-Low 
transition on these signals causes the DRAM selected by 
RAS#[0:3] to latch the column address and complete the access. 


St i Lc alacant 
bank. 
Li ac nee gy 
selects the memory devices in the corresponding ROM bank. 
4 


| ROM Address Latch, ROM address are divided into two portions, 
higher address bits and lower address bits, the address will be p 
out on the MA bus in two consecutive cycles. The ROMEN signal 
is used to latch the higher address bits in the first ROM address 
cycle. 
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ROMRW# i Lae FLASH ROM write enable. This signal is used to write data into 
the mrmory in a ROM bank (such as Flash ROM). 
to drive the MD bus. 


206-208, 1,3-4,6- Memory controller Memory Address bus. For DRAM access, 

7,9-10,12-13 MAJ[0:11] is the DRAM row address and the DRAM column 
address. For ROM/FLASH ROM access, MA[0:11] is the higher 
portion ROM space address bits in the first ROM address cycle, 
and the lower portion ROM space address bits after the first RO 
address cycle. MA[0] is the most significant bit (msb). 

MD[O:31] 157-159,161- Memory controller Data bus for both DRAM data and ROM spac 

162,164-167,169- data. Bit 0 is the most significant bit (msb). 

170,172-178,180- 

181,183-194 
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MA[O-11] 


COM1 Serial Port Signal 


SIN1 
SOUT1 


COM2 Serial Port Signal 


SIN2 
SOUT2 


COM1 serial data input from the communication link (modem or 
peripheral device). 

COM1 serial data output to the communication link (modem or 
peripheral device). 

[96 COMI data set ready 

[93 COM requesttosend 


ae COM2 serial data input from the communication link (modem or 
peripheral device). 
COM2 serial data output to the communication link (modem or 


peripheral device). 
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5. W90210F CPU Core 


The key characteristics of the W90210F CPU core have been designed specifically to meet the requirements of 
embedded control applications. The following subsections describe the essential features of the W90210F CPU core, 
including its architecture, implementations, and registers. 


5.1 Architecture 
The W90210F CPU core is designed based on the powerful PA-RISC architecture. Since our target is high- 
end embedded applications, a great deal of design effort has been devoted to taking full advantage of this powerful 
architecture. 


§.1.1 PA-RISC Rev. 1.1 third edition 

The core of the W90210F is a processor unit that complies with PA-RISC architecture Rev. 1.1 third edition 
specifications. There are three kinds of operations to be executed by the processor; branch, joad/store, and data transform. 
Most RISC architecture chooses to execute one of the three operations in an instruction. On the contrary, most PA- 
RISC instructions perform two operations listed above. For example, "ADD and BRANCH on the result of the ADD” can 
be done with one PA-RISC instruction. W90210F CPU core implements these powerful instructions and executes them 
in a single cycle. With such a powerful combined operation instruction set, the code size of W90210F can be much 
smaller than other RISC system. With the single cycle execution capability of these instructions, W90210F deliver very 
high throughput. 


§.1.2 Level 0 implementation 

Inthe PA-RISC architecture, a processor without an MMU is defined as the Level 0 implementation. All memory 
and I/O accesses in a level 0 PA-RISC processor are in real mode. W90210F is a level 0 implementation of PA-RISC 
architecture. 


5.1.3 Multimedia Extension Instruction Set 

The PA-RISC Multimedia extensions consists of a set of instructions which speed up the execution of common 
operations found in multimedia applications. In a 32-bit integer datapath, each multimedia instruction allows generic 
arithmetic operations to be executed in parallel on two pairs of 16-bit data. The PA-RISC multimedia extensions 1.0 
instruction set is implemented by the W90210F CPU core. 


5.2 CPU resources 
The W90210F CPU core implements all the registers needed for a Level 0 processor as defined in the PA- 
RISC specifications. Some registers or register bits are not needed in a Level O processor and are defined as 
nonexistent registers or register bits. The W90210F CPU implements three AIRs (Architecture Invisible Registers) that 
can be accessed by executing DIAG instructions. 


5.2.1 General registers 

Thirty-two 32-bit general registers provide the central resource for all computation. They are numbered GR 0 
through GR 31, and are available to all program at all privilege levels. GR 0, when referenced as source operand, 
delivers zeros. When GR 0 is used as destination, the result is discarded. GR 1 is the target of the ADD IMMEDIATE 
LEFT instruction. GR 31 is the instruction address offset link register for the base relative interspace procedure call 
instruction. GR 1 and GR 31 can also be used as general register. 
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GRO Permanent zero 
GR 1 
GR2 General use 
GR 30 General use 
GR 31 Link register for BLE or General use 
Figure 5.1 General Registers 
5.2.2 Shadow registers 


W90210F GPU core provides seven registers called shadow registers as defined in the PA-RISC architecture. 
The contents of GR1,8,9,16,17,24 and 25 are copied upon interruptions. Shadow registers reduce the state save and 
restore time by eliminating the need for general register saves and restores in interruption handlers. The behavior of the 
shadow registers is described below. 

Before entering interrupt routine: Contents of seven general registers are copied into shadow registers in one cycle. 

When executing RFIR: Contents of shadow registers are copied into general registers automatically in one cycle. 


5.2.3 Processor Status Word (PSW) 

The processor state of W90K is encoded in a 32-bit register called the Processor Status Word (PSW). The 
format of PSW is shown in figure 5.2. The old value of the PSW is saved in the Interrupt Processor Status Word (IPSW) 
when interruption occurs. The PSW is set to the contents of the IPSW by the RFIR (RETURN FROM INTERRUPTION 
and RESTORE) instruction. 


Description 


Little endian mode enable. When 1, all instruction fetches and loads/stores are little endian. The E bit after 
RESET is set according to the state of ENDIAN pi 

Secure Interval Timer. When 1, the Interval Timer is readable only by code executing at the most privileged 
level. When O, the Interval Timer is readable by code executing at any privilege level. 


Non-existent register bit. 

Divide step correction. The integer primitive instruction records intermediate status in this bit to provide a 
non-restoring divide primitive. 

High-priority machine check mask. When 1, High Priority Machine Checks (HPMCs) are masked. Normally 
0, this bit is set to 1 after HPMC and set to 0 after all other interruptions. 


CiB Carry/borrow bits. These bits are updated by some instructions from the corresponding carry/horrow 
outputs of the 4-bit digit of the ALU. 
F 


G Debug trap enable. 


Non-existent register bit. 
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Recovery counter enable. When 1, recovery counter traps occur if bit 0 of the recovery counter is a 1. This 
bit also enables decrementing of the recovery counter. 
fq. Interrupt state collection enable. When 1, interruption state is collected. 


Non-existent register bit. 
Non-existent register bit. 


External interruption, power failure interrupt, and low-priority machine check interruption unmask. When 1, 
these interruptions are unmasked and can cause _an interruption. 
Figure 5.2 Processor Status Word 


§.2.4 Control registers 
There are twenty-five control registers in W90210F, numbered CRO, and CR8 through CR31, which contain 
system state information. Figure 5.3 shows the control registers. The access of CR 11, 16, 26, and 27 are described in 
the following table (table 5.4). Those control registers not listed in table 5.4 are only accessible by code executing at the 
most privileged level. Control registers 1 through 7 are reserved registers. The unused bits of the Coprocessor 
Configuration Register are reserved bits. The unused bits of the Shift Amount Register are nonexistent bits. In Level 
systems, CRs 8, 9, 12, 13, 17, and 20 are nonexistent registers. 
0 31 
CRO 
cR1 


CR7 
CR8 
CRS 
CR 10 COR (8 bits 
cR1t SAR (5 

CR 12 
CR 13 
CR 14 reserved 

CR 16 
CR 17 
CR 18 
cR19 
CR 20 
Rat 
CR 22 
CR 23 
CR 24 


CR 31 


Figure 5.3 Contro} registers 


_—aEay Privilege level for the access 
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privilege level 
PSW 'S'=0: read/write by any privilege level 
PSW'S'=1: read/write by privileged software 


CR 26, 27 readable at any privilege level 
writable at the most privileged level 


Accessible only at most privileged level 


Table 5.4 Access of contro! registers 


5.2.5 W90210F External Interrupt Request register (EIRR; CR23) 


Bit EI[0:4] External Description 
Number Interrupt 
0 00000 Timer_Int Interval Timer (CR16) interrupt request 
L 0000 - 
2 01000 - 
3 | L000 Serial Serial port interrupt request from COM2 
4 00100 INTA PCI bus INTA# interrupt request 
5 0100 INTB PCI bus INTB# interrupt request 
6 01100 INTC PCI bus INTC# interrupt request 
7 100 INTD PCI bus INTD# interrupt request 
8 00010 Parallel_Int Parallel port interrupt request 
9 0010 Serial_Int Serial port interrupt request from COM1 
10 OLOLO DMA_Int DMA interrupt request 
LL OLO TC_Int Timer/Counter interrupt request 
12-31 - - Reserved 


Table 5.5 External Interrupt Request Register 


5.2.6 AIRs (Architecture Invisible Registers) 

There are eight AlRs in the W90210F. AIR[O] controls the internal cache configuration, burst mode, and default 
endian. AIR[O] is documented in this data sheet. AIR[1] and AIR[2] are reserved for chip testing by Winbond, and their 
functions will not be disclosed to users. Attempting to access these two registers may cause programs to be executed 
with unpredictable results. Memory configuration registers are used for programming the configuration of W90210F 
memory space. AIR[7] is the PCO register, this AIR can only be accessed through the JTAG ICE interface. 


Table 5.6 W90210F CPU core AIRs 


Important: Enabling or disabling the internal |-cache with MTAIR[0] will invalidate all l-cache entries automatically. 
Enabling the internal D-cache with MTAIR[Q] will invalidate all cache entries without dirty data entries being written back. 
Disabling the D-cache, however, will not invalidate cache entries. 

Disabling the internal D-cache with MTAIR[0] will cause dirty data to be left in the D-Cache and not 
automatically written into memory. When a program references the dirty data location, stale data in memory will be 
returned. To prevent this, a cache invalidation routine should be performed before the internal D-cache is disabled. The 
invalidation routine must flush all cache entries one by one. This will invalidate the cache and also write back any dirty 
data. 

AIR[1] and AIR[2] are reserved registers and should never be written to or read from them. Accessing these 
registers will cause unpredictable result. 


5.3 Implementation of the PA-RISC instructions 
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The W90210F CPU core implements all the instructions specified in the PA-RISC Rev. 1.1 third edition. 
W90210F executes these instructions with results that comply to the PA-RISC architecture. MMU related instructions 
are executed by W90210F as defined in the PA-RISC architecture for a Level 0 processor. PA-RISC multimedia 
extension 1.0 instruction set is also supported by W90210F. To speed up multimedia operations in some applications, 
three additional instructions are defined through the diagnostic instructions. In addition to that, debug SFU is provided to 
enhance the debug capability. The chip also implements DIAG instructions defined by Winbond for chip testing, 
diagnostics, and programming the internal AIR (architecture invisible register). These DIAG instructions comply with the 
PA-RISC DIAG instructions. 


5.3.1 Implementation of Level 0 instructions 

In the Level 0 processor implementation, the S-fields of all instructions are ignored and have no effect on the 
device functions. The following instructions for TLB handling are executed as null instructions, as specified in the 
architecture reference manual: 


Purge data TLB 
Purge instruction TLB 
Purge data TLB entr 


PITLBE 
Insert instruction TLB address 


Table 5.7 Instructions executed as null instructions 


Table 5.8 lists the differences in instruction execution results in a Level 0 processor. 
Jinstruction | Description | Difference 
B : F 


Branch and link external 
Return from interrupt and restore 


Move to space register Executed as null instruction 


Load space identifier Qis written into specified GR 


Move to control register Executed as null instruction if target is 8,9,12,13,17 or 
20 


Move from space register is written into specified GR 


Move from control register is written into specified GR if source is 8,9,12,13,17 or 
20 


Probe write access immediate 


Table 5.8 Summary of Level 0 instruction differences 


5.3.2 Implementation of cache-related instructions 
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It is assumed that in the W90210F application system all DMA transfers will be completed in order. The 
instruction for DMA cache synchronization SYNCDMA will be executed as a null instruction. The W90210F CPU core 
does not snoop the external bus to check the coherence of the cache. To ensure that the contents of the memory 
remain consistent, devices outside the W90210F CPU can access only non-cacheable memory. FLUSH and purge 
cache instructions will flush the internal cache only. The W90210F will not broadcast a flush or purge operation to the 
secondary cache or other bus master (if any). 

FICE and FDCE are implemented as described below. 


° FICE will flush all instruction cache entries. All instruction entries become invalid after the execution of 
FICE. 

. FDCE is used to flush an individual cache entry. This instruction causes dirty data to be written back 
to memory. 


The data cache in the W90210F has 2 x 64 entries. To flush the entire data cache, a loop that execute a flush 
toa single entry can be used to flush the entire data cache. 


[instruction | execution regu! 


Table 5.9 Cache-related instructions and execution results 


5.3.3 PA-RISC multimedia extension instruction set 
The PA-RISC Multimedia extensions consists of a set of instructions which speed up the execution of common 
operations found in multimedia applications. Multimedia instructions perform multiple parallel operations in a single cycle. 


instruction | Description 
Halfword parallel subtract 
HAVE Halfword parallel average 


Table 5.10 PA-RISC multimedia instructions 


5.3.4 DIAG instruction 

DIAG instructions are a special instruction format defined by PA-RISC; the functions of these instructions 
depend on the specific implementation. These instructions are used to program special control registers in the WSO0K 
that are not visible in the PA-RISC architecture. 

The DIAG instruction syntax is not supported by the assembler. A special macro file provided by Winbond must 
be included in user programs. The macro converts DIAG assembly instructions into a format recognized by the 
assembler. With the help of this file, users can employ the DIAG syntax described below for programming. 


[instruction | Description 
Copies value into a general register from AIR register 

Copies value into a specified Instruction cache from a general register 

Copies value into a general register from a instruction cache ent 
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Table 5.11 DIAG instructions 
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5.4, Debug Special Function Unit 

The debug special function unit is an optional, architected SFU which provides hardware assistance for 
software debugging using breakpoints. The debug SFU is currently provided in the W90210F CPU core. The debug 
SFU supports two sets of registers for both data breakpoints and instruction breakpoints. 

For the instruction debug trap, the trapping address is stored in the interruption instruction address offset 
queue (IIAQQ). For the data debug trap, the trapping address is stored in the interruption offset register (IOR). 

The e bit in each IBAMR determines whether this instruction breakpoint is enabled. If the e bit is 1, any attempt 
to execute an instruction (including nullified instructions) at an address matching the corresponding IBAOR will cause an 
instruction debug trap. If the e bit is 0, that instruction breakpoint is disabled. 

Instruction Breakpoint Address Offset Register (IBAORO, IBAOR1): 


0 31 
address offset 
IBAOR 
Instruction Breakpoint Address Mask Register (IBAMRO, IBAMR1): 
01 7 8 31 
e v mask 
IBAMR 
Data Breakpoint Address Offset Register (DBAORO, DBAOR1): 
0 31 
address offset 
DBAOR 
Data Breakpoint Address Mask Register (DBAMR0, DBAMR1): 
012 7 8 31 
rilw Vv mask 
DBAMR 


Figure 5.12 Debug SFU registers 


The r and w bits in each DBAMR determine the type of access this data breakpoint is enabled for. If the r bit is 
1, any non-nullified load or semaphore instruction to an address matching the corresponding DBAOR will cause a data 
debug trap. If the w bit is 1, any non-nullified store or semaphore instruction or cache purge operation to an address 
matching the corresponding DBAOR will cause a data debug trap. If the r and w bits are both 0, the data breakpoint is 
disabled. 

For the control of the debug SFU, three bits are added to the PSW register. 

Debug Trap Enable Bit (G): Bit 25 of the PSW is defined as the G-bit- the debug trap enable bit. When the G-bit is 
1, the data debug trap and instruction debug trap are enabled; when 0, the traps are disabled. The G-bit is set to 0 on 
interruptions. 

Data Debug Trap disable Bit (Y): Bit 0 of the PSW is defined as the Y-bit. The Y-bit is set to 0 after the execution of 
each instruction, except for RFI and RFIR instructions which may set it to 1. When 1, data debug traps are disabled. 

Instruction Debug Trap disable Bit (Z): Bit 1 of the PSW is defined as the Z-bit. The Z-bit is set to O after the 
execution of each instruction, except for RFI and RFIR instructions which may set it to 1. When 1, instruction debug 
traps are disabled. 

In addition, CCR bits 16- 23 are used as enable/disable bits for SFUs 0- 7. The debug SFU will use bit 17. 
When bit 17 is enabled, the SFU #1 instructions will operate normally, but when disabled, all SFU #1 instructions will 
take an assist emulation trap. 

Two new exceptions are added to the architecture- one for instruction debugging and one for data debugging. 

Instruction Debug Trap (30): Interruption #30 is now defined as the instruction debug trap. This trap belongs to 
group 3. 

Data Debug Trap (31): Interruption #31 is defined as the data debug trap. This trap belongs to group3. 

Following instructions are added for the debug SFU. 
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MFIBAO 


Table 5.13 Debug SFU instructions 


5.5 Addressing and access control 
The W90210F implements real mode addressing. The total addressable space for the W90210F is 4 GB. 
Objects in the memory and I/O system are addressed using 32-bit absolute addresses. An absolute pointer is a 32-bit 
unsigned integer whose value is the address of the lowest addressed byte of the operand it designates. The address 
mapping is sarne as that specified by the PA-RISC architecture. 


5.5.1 Memory and I/O space 


X'00000000 
Memory Address Space 
X'EFFFFFFF 
X'FO000000 
\/O Address Space 
X'FFFFFFFF 


Figure 5.16 Memory and VO addresses 


Figure 5.16 shows the memory and I/O address space allocation. 

Total memory address space available is (4 GB-256 MB). Total addressable I/O space is 256 MB. 
Program address for I/O: FXXXXXXX 

W90210F CPU core output address: OXXXXXXX 


§.5.2 RESET addresses 

The initial instruction address after a hardware reset is not defined in the PA-RISC architecture. Two reset 
addresses are provided for W90210F CPU core. W90210F CPU core will sample the input pin "PA/486#" at the trailing 
edge of RESET to determine the initial instruction address. When PA/486# pin is low, the initial address will be 
OOOFFFFO; when PA/4&6# is high, it will be EFFFFFFO. This pointer ensures that the program starts execution from 
ROM space when used in an X86-compatible board. W90210F CPU core has an internal pull down resistor that will set 
W90210F CPU to generate X86-like initial address if the PA/486# is left unconnected. 

For W90210F, the reset address is always EFFFFFFO. 


5.5.3 Access control 

Every instruction is fetched and executed at one of four privilege levels (numbered 0,1 2, 3) with O being the 
most privileged. The privilege level is kept in the bits 30 and 31 of the current instruction's address. Base relative branch 
instructions (BV, BE and BLE) will demote privilege level to any non zero value, if it changes it. GATEWAY instruction 
promotes the privilege level to 0. Other branch instructions have word offset only and will not change privilege level. 
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5.6 Interruptions 
Interruptions are anomalies that occur during instruction processing causing the flow control to be passed to an 
interruption handling routine. The interruptions are categorized into four groups based on their priorities. Interruption 
numbers in table 5.17 are the individual vector numbers that determine which interruption handler is invoked for each 
interruption. The group numbers determine when the particular interruption will be processed during the course of 
instruction execution. The order the interruptions are listed within each group determines the priority of simultaneous 
interruptions(from highest to lowest). 


p interruption number 


High-priority machine check 
Power failure interrupt 
Recovery counter trap 
External interrupt 
Low-priority machine check 
Instruction debug trap 
llegal instruction trap 
BREAK instruction trap 
Privileged operation trap 
Privileged register trap 
Overflow trap 

Conditional trap 

Data debug trap 

Assist emulation trap 


nN 
nN 


; 
2 
ae 
EE as 
14 
mE ya 
EE 
EE as 


23 Higher-privilege transfer trap 
24 Lower-privilege transfer trap 
25 Taken branch trap 

Table 5.17 Interruption number 


Interruption handler routine begins execution at the address given by: 
Interruption Vector Address + (32*interruption_number) 

However, handler of HPMC will start at ‘initial address + 4', where ‘initial address is the first instruction address 
issued by W90K after RESET. There are two initial address (determined by PA/486#) , X‘OOOFFFFO or X'EFFFFFFO. 
HMPC handler will start from either X‘OOOFFFF4 or X'EFFFFFF4. This arrangement is to ensure that HPMC handler will 
start first at a ROM address that is more reliable than DRAM. 
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6. Pipeline Architecture 


The pipeline used in the W90210F CPU core is a typical five-stage pipeline. Most instructions are executed in 
one single cycle except long instructions. Long instructions are FDC, FDCE, FIC, FICE, PDC, RFIR, and RFI. For 
Branch instruction, one delay slot is needed. 


The pipeline is shown below: 


Lia [oe Tee [ex Tm we 


IA: Instruction address calculation 
IF: Instruction fetch 
FR: Register fetch and decode 
EX: Execution and data address calculation 
MM: Memory reference for Load/Store instruction 
WB: Write back to register file 
Figure 6.1 W90K pipeline architecture 


IA: The instruction address for the cycle is generated. The sources of the instruction address are n+1, branch 
target, interrupt vector, I[AOQ, and reset pointer. The address is calculated and selected within half cycle. 

IF: Instruction cache is fetched during this cycle. Instruction will be available before end of IF. IMISS (instruction 
cache miss) will be available at the second half of IF. 

FR: The instruction from IF stage is used to access the register file and decoded for execution. The bypass 
control is also generated to select the correct bypass path. If the instruction is a cache miss, the pipeline will stall at this 
stage. 

EX: The instruction is executed in this stage. For branch instructions, a dedicated adder is used to calculate the 
target address at the first half of EX (corresponding to the IA stage of the instruction after the delay slot). The condition 
check is also performed in this stage for conditional branch instruction. Data address for memory reference instruction is 
also calculated in this stage. For non-nullified MTCTL instruction, data will be written into CR at the end of the EX stage. 
External traps (El, HPMC, LPMC and PFW) will be sampled at the EX stage and piped to the WB stage for trap 
handling. 

MM: The data cache is referenced at this stage. 

WB: The data from EX or MM stage will be written back to register file in the first half of the WB stage. The data 
can be read out by the FR stage in the same cycle; otherwise one extra bypass will be needed. If the MM stage of this 
instruction is a miss and a data dependence exists, the pipeline will stall at the WB stage; otherwise, the pipeline will 
continue. 


6.1 Branch prediction 
Static branch prediction is used for conditional branch instructions in W90210F CPU core. 
Forward branch: predict not taken 
Backward branch predict taken 
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'1) Correct prediction 


CLK CLK cLK 
[ lA IF FR EX [ww | wr | conditional branch 


lA IF FR EX MM WR delay slot 


lA IF FR EX MM WR predict address 


(2) Incorrect prediction 


conditional branch 
delay slot 
predict address (nullified) 
correot address 


Figure 6.2 Pipeline operation for branch prediction. 


6.2 Load use interlock 


Load use interlock: A one-cycle interlock will be forced by hardware when load use dependence occurs. 
Pate fem] ex Tm Tw] Load rt 


lA IF FR EX EX MM WR 1 used 


Figure 6.3 Load-use interlock pipeline operation 
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7. On-Chip Cache Memories 


The WS80210F contains a 4-Kbyte instruction cache and a 2-Kbyte data cache. Cache memories hold 
instructions and data that are repetitively accessed by the CPU and thus reduce the number of references that must be 
made to the slower main memory. The internal cache uses a Harvard architecture, so the bandwidth between the cache 
and processor is 2 words/cycle. Separate address and data bus are provided for I-cache and D-cache (Harvard 
architecture). 

After reset, both internal caches are disabled and all memory accesses are forwarded to the external bus. 
AIR[0] is used to enable and disable the internal caches. A DIAG instruction (MTAIR) is the only instruction that can 
access AIR[O]. 

The instruction cache is a direct mapped cache and the data cache is a 2-way set associative cache. Common 
features for both caches are: 

#4 words per entry 
One valid bit per entry 
*Wrap-around fill 

The line size is four words with a single valid bit for all four words. The line size is the same as that of an i486 
processor, since the W90210F CPU core is designed to use an 486-type bus. Four words per entry is an optimal value, 
considering the relatively small internal cache and the external bus bandwidth available. 

The cache controller will request the BIU (Bus Interface Unit) for missed addresses. A whole line will be filled 
after a cache miss, since only one valid bit is available. The BIU will first return the word needed (not necessarily the first 
word in the entry) for program execution, and the processor will continue once the first word is returned. The remaining 
three words will be filled into the cache while the program is executed; this is the so-called wrap-around refill scheme. 

Important: Attempting to enable an internal cache after it has been enabled and then disabled will lead to 
unpredictable results, because the internal cache may contain stale data. Hence a cache invalidation routine that flushes 
all cache entries one by one must be performed before an internal cache is disabled. This will invalidate the cache and 
cause any dirty data to be written back to memory. 


7.1 Instruction cache 
Instruction cache is a 4-Kbyte direct mapped cache. The instruction cache is divided into four 1-Kbyte caches, 
and each 1-Kbyte cache can be freezed individually by setting the corresponding cache freeze bit in the AIR[O]. 
The cache freeze function must be implemented by the pre-load method. User must fill the instruction cache 
with the desired routines by MTITAG and MTICAH diagnostic instructions and then set the corresponding freeze bit to 
freeze the particular routine in the instruction cache. 


7.2 Data cache 
The integrated Data cache has several features that are not shared by the I-cache. The features listed below 
have been added to enhance the efficiency of the D-cache: 
*  Write-back cache with write-through option 
¢ Hit under miss 
« Separate byte write endle 
The integrated D-cache is a write-back cache by default. This minimizes the number of bus cycles needed 
between the CPU and the slow main memory system. Data are written back to main memory only when an entry with 
dirty data is to be replaced by a new address. 
The address range for write-through cache option is programmable. User can program the write-through base 
register and the write-through region size register (memory configuration registers) by MTAIR instruction. 
The "hit under miss" scheme is used in the WS0210F. A cache hit data reference is completed in one cycle. 
When data miss occurs the W90210F will continue execution as long as the data are not needed. The BIU will perform 
data access for the miss cycle in parallel with the program execution. While the BIU is accessing the missed data, the 
internal D-cache can still be accessed by following load/store instructions. The W90K will stall only when missed data are 


24 Version 1.4, 10/8/97 


The above infeemistion is the exclusive intellectuel propedty of Winbond Electronics Corp, and shell not be disclosed, distributed or reproduced without permission from Wintond. 


tt Winbond W90210F 


E” Electronics Corp. ~~ 


needed for the program execution (i.e., a data dependency is encountered) or when a second miss cycle occurs before 
the first miss cycle is serviced. The "hit under miss" scheme helps to minimize the D-cache miss penalty. 

Separate byte write enables are provided for store instructions. This feature enables the W90210F to execute 
store byte(s) instructions without read-modify-write operation. 


7.2.1 Write-through Cache Support 
Normally, the data cache is a write-back cache. Range for the write-through cache address space can be 
defined in the AIR. 
Write-through base register[0:15]: This register defines the base address of the write-through address range. 
Write-through region size register: This register defines the size of the write-through address range: 
000: disable 
001: 64K 
010: 128K (base address must be multiple of 128K) 
011: 256K (base address must be multiple of 256K) 
100: 512K (base address must be multiple of 512K) 
101: 1M (base address must be multiple of 1M) 
110: 2M (base address must be multiple of 2M) 
411: 4M (base address must be multiple of 4M) 
Important: User must flush the data cache before setting up these two registers. 


7.3 Non-cacheable address space 
User can define two non-cacheable regions with sizes ranging from 64K to 4M Byte. BIU can use these two 
ranges to decide whether current bus cycle is cacheable or not. 
Non-cacheable base address register: This register defines the base address of the non-cacheable address 


range. 
Non-cacheable region size register: This register defines the size of the non-cacheable address range: 
000: disable 
001: 64K 
010: 128K (base address must be multiple of 128K) 


( 
011: 256K (base address must be multiple of 256K) 
100: 512K (base address must be multiple of 512K) 
101: 1M (base address must be multiple of 1M) 
410: 2M (base address must be multiple of 2M) 
111: 4M (base address must be multiple of 4M) 


The memory address space above 1MB, 2MB, 4MB, 8MB, 16MB, 64MB, 128MB or 256MB can also he turned 
into a third non-cacheable region. This is defined by the system non-cacheable region register: 0000: all 
cacheable 

0001: above 1MB 
0010: above 2MB 
0011: above 4MB 
0100: above 8MB 
0101: above 16MB 
0110: above 32MB 
0111: above 64MB 
1000: above 128MB 
1001: above 256MB 
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8. Megacells Description 


8.1 DRAM Controller & ROM Controller 


8.1.1 DRAM controller 
The DRAM controller supports four separate banks of dynamic memory. Either X9 or X36 SIMMs are 
supported. CAS#-before-RAS# refresh cycles are performed periodically, as determined by the refresh timer. The 
DRAM controller must arbitrate between access requests and refresh requests. EDO fast page mode and parity check 
are also supported. 


Refresh Timer RAS#4] 
DRAM Type Register CASH] 
. Bus Bank Base Address 
CPU interface Interface Registers Ih MA[12] 
to ] 
CPU core -! | wapps2] 
|___Register_| 
Register WE# 
DRAM Timing 
Register 


Figure 8.1 DRAM controller block diagram 


For each bank of DRAM, there will be registers to specify the bank base address and the bank DRAM type: 
Bank Base Address Register. 
Bank Type Register. 

DRAM Type Register is used to program the DRAM type of each bank. 


___ DRAM Type 00 : 256K DRAM cell 
01: 1M DRAM cell 
10 : 4M DRAM cell 
11: 16M DRAM cell 


oft 2lsfalslel7 


Bank Bank Bank Bank 
3 2 1 0 


DRAM Type Register 


Figure 8.2 DRAM Type register programming 


DRAM Timing Register is used to program DRAM timing parameters: 
2ah 6:7] Write cycle RAS# to CAS# delay. 

4:5] Read cycle RAS# to CAS# delay 

3] Write cycle CAS# pulse width. 

2] CAS# precharge time. 

0:1] RAS# precharge time. 

2bh 6:7] Read cycle. CAS# pulse width. 

5] Refresh cycle. CAS# active to RAS# active delay. 
3:4] Refresh cycle. RAS# active to CAS# inactive delay. 
1:2] Refresh cycle. RAS# active pulse width. 

0] Parity check enable. 
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DRAM configuration register is used to program the DRAM configuration: 
[7] EDO fast pagemode enable. 
[6] Fast write mode enable 
[5] Disable DRAM address range from AQ000 to FFFFF 
[4] Enable DRAM bank 0. 
[3] Enable DRAM bank 1. 
[2] Enable DRAM bank 2. 
[1] Enable DRAM bank 3. 
The refresh timer is a decrementing timers, which are clocked by a separated clock from the system clock. 
When the refresh timer reaches zero, the refresh timer will generate a DRAM refresh request. 


8.1.2 ROM controller 
The ROM controller also supports upto four banks of ROM and the ROM can be 8-bit, 16-bit, or 32-bit. 


Bank Base/Size_ 
Registers 
[ 
MA ROM Address 
sahiees Bus FLASH | Memory Data 
nterface | ROM and FLASH ray tata var tar 
Interface Configure Register latch enable 4 
cs#[4] 
ROM/FLASH Read 
: Wait State bon 

rhwit 

Figure 8.3 ROM controller diagram 


For each bank of ROM, two registers are used to specify the bank address range: 
ROM Bank Base Address Register. 
ROM Bank Size Register. 
ROM Configuration Register is used to program the ROM data bus size of each bank. 
f— ROM Bus Size 


00 : 8-bit ROM 
01: 16-bit ROM 
10 : 32-bit ROM 
11: reserved 


\ 
01 2/3|4|5|6|7 


Bank Bank Bank Bank 
3 2 1 i?) 


ROM Configuration Register 


past Nasi 


Figure 8.4 ROM configuration register programming 
ROM Wait State Register is used to program the number of wait states needed to access ROM. 


8.1.3 Memory controller registers 
In Memory Controller, two IO ports are used to access the entire register set: the index port is at address 22h 
and the data port is at address 23h. To access a register, first write the index into the index port and then read or write 
the data through the data port. The internal register for the memory controller is listed as follows: 


ROM controller reqister : 


Index Bit No. Description 


00h [0:7] ROM bank 0 base address register[0:7] 
Oth [0:7] ROM bank 0 base address register[8:15] 
02h [0:7] ROM bank 1 base address register[0:7] 
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O3h [0:7] ROM bank 1 base address register[8:15] 
04h [0:7] ROM bank 2 base address register[0:7] 
05h [0:7] ROM bank 2 base address register[3:15] 
06h [0:7 ROM bank 3 base address register[0:7] 
07h [0:7] ROM bank 3 base address register[8:15] 

The register 0~7 has no default value. 
08h [0:7] 0:3] ROM bank 0 size. 

4:7] ROM bank 1 size. 
ogh [0:7] 0:3] ROM bank 2 size. 

4:7] ROM bank 3 size. 

OXXX — disable. 


1000 —» 64K, 1001 —> 128K, 1010 256K, 1011-4 512K, 
1100-3 1M, 1101->2M, 1110-+4M, 1111-> 16M. 
The default value is 0. 
Oah [0:7] [0:1] bank 3 band width: 0G+ 8 _ bit, 01 16 bit, 10 32 bit, 11— reserved 
[2:3] bank 2 band width: 005 8 bit, 01> 16_bit, 10 32_bit, 11 reserved 
[4:5] bank 1 band width: 00> 8 bit, 01> 16_bit, 10-5 32_bit, 11 reserved 
[6:7] bank 0 band width: 0G> 8_ bit, 01 16 bit, 10-+ 32_bit, 11 reserved 
The default width of bank 0~3 is set by memory data bus bit 30 and 31. 
Obh [0:7] [0:2] ROM access wait state. 
000 — wait 2 state. 001 wait 3 state. 
010 — wait 4 state. 011— wait 5 state. 
100 — wait 6 state. 101 wait 7 state. 
110 > wait 8 state. 111 wait 9 state. 
The default wait state is. 
[3] access ROM bank0 only. Default bankO only. 
[4] LA mode. Default LA mode. 


DRAM Controller Register 


Index BitNo. Description 
20h 0:7] DRAM bank 0 base address register[0:7] 
2th 0:7] DRAM bank 0 base address register[8:1 1] 
22h 0:7] DRAM bank 1 base address register[0:7] 
23h 0:7] DRAM bank 1 base address register[8:11] 
24h 0:7] DRAM bank 2 base address register[0:7] 
25h 0:7 DRAM bank 2 base address register[8:1 1] 
26h 0:7] DRAM bank 3 base address register[0:7] 
27h 0:7] DRAM bank 3 base address register[8:11] 
The registers 20~27 has no default value. 
28h 0:7] 0:1] DRAM bank 3 type : 00 256K, 01 —> 1M, 10-5 4M, 11 —> 16M, 


2:3] DRAM bank 2 type : 00 256K, 01 — 1M, 10-> 4M, 11-—> 16M, 
4:5] DRAM bank 1 type : 00 256K, 01 — 1M, 10 4M, 11— 16M, 
6:7] DRAM bank 0 type : 00 256K, 01 —> 1M, 10-5 4M, 11 —> 16M, 
Default 256K type. 

29h [0:7] 0] Parity check enable. (default 0) 

1] Enable DRAM bank 3.(default 0) 

2] Enable DRAM bank 2.(default 0) 

3] Enable DRAM bank 1.(default 0) 

[4] Enable DRAM bank 0.(default 0) 

5] Disable DRAM address range from AQO00 to FFFFF.(default 0) 

6] Fast write mode enable.(default 0) 

7] EDO fast page mode enable.(default 0) 
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2ah [0:7] [0:1] RAS# precharge time.(default 0) 
[2] CAS# precharge time.(default 0) 
[3] Write cycle CAS# pulse width.(default 1) 
[4:5] Read cycle RAS# to CAS# delay (default ‘b01) 
[6:7] Write cycle RAS# to CAS# delay .(default 'b01) 
2bh [0:7] [0:1] Refresh period. 
00 :~» 15us. (default). 
01 :— 30us. 
10 :—> 60us. 
11 :-— disable refresh (for test only). 
[2] Refresh cycle. RAS# active pulse width after CAS# disactive. 
[3:4] Refresh cycle. RAS# active to CAS# inactive delay .(default 'b01) 
[5] Refresh cycle. CAS# active to RAS# active delay.(default 0) 
[6:7] Read cycle CAS# pulse width. (default 'b01) 
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8.2 DMA Controller (DMAC) 

The DMAC megacell provides two DMA channels to support DMA transfers between 8-bit I/O devices and main 
memory. The DMA mechanism will provide two different methods for performing DMA transfers: demand-mode 
transfers and block-mode transfers. The DMAC hardware is responsible for synchronizing transfers with memory or 
external devices. 

When the DMAC is configured for demand mode, an external device requests a DMA transfer with a request 
input (DREQ1:0#). The DMAC acknowledges the requesting device with an acknowledge signal (DACK1:0#) when 
the requesting device is accessed. 

In block mode, DMA transfers are not requested by an external device. The DMA operation is initiated by software 
and continued until terminated or suspended. The DMA operation is started when the enable bit in the Configuration 
Register is set. 


DMAC megacell iq. DREQ#2] 
SSAR 
ae ea > DACK#2] 
LETH » 1oR 
acta MODE > lOW 
TXCOUNT 
q—) lODarTars] 
Esau » DA[12] 
> csiz] 


Figure 8.5 DMA controller 


In programming the megacell registers, the register address is defined by the BASE register plus the offset value. 


8.2.1 Register Description: 
Source Starting Address Register (SSAR0=080, SSAR1=084): SSAR is a read/write 32-bit register that contains 
the starting address of the DMA transfer source. 
Target Starting Address Register (TSAR0=081, TSAR1=085): TSAR is a read/write 32-bit register that contains the 
starting address of the DMA transfer target. 
Length/Count Register (LETH0=082, LETH1=086): LETH is a read/write 32-bit register that records the counts of 
current DMA transfer. 
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DMA Channel Mode Register (MODE0=20c, MODE1=21c): The MODE register specifies the operation mode of 
each channel. 
The Wait State Number specifies the number of wait state needed for the particular DMA channel. 
The Recovery State Number specifies the number of wait state needed for the recovery of the DMA 


channel. 

The channel terminal count flags indicate that a DMA operation has stopped. 

The DMA channel enable bits enable or suspend a DMA operation after a channel is set up. If a enable bit 
for a channel is cleared when a channel is active, the DMA will be suspended after pending requests for the 
channel are serviced. The DMA operation will resume normally when the bit is reset. 


DMA Channel Enable Bit 
Terminal Indicator 

0: Polling 

1: Interrupt 


DMA is used by Parallel Port (ECP) 

wm “Terminal Count Flag 

Transfer Start (only for memory-to-memory) 
Transfer Type: Block (0) or Demand(1) 
DMA I/O Type 

00: 8-bit 

01: 16-bit 

10: 32-bit 

11: reserved 

———— DMA Transfer Type 

00: memory to memory 

01: memory to /O 

10: /O to memory 

11: reserved 


Recovery State 


} i. Wait State 


\ 


01234567 891011 1516 20 


MODE 
Figure 8.6 Programming DMA controller MODE register 
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8.3 Timer / Counter 
Timer/Counter megacell . 
¢ TCLK 
TCRL 
Peripheral TICRL -——p TINTL 
a Interface TCR? > TINT? 
TICR2 


‘igure 8.7 Timer/Counter Megacelt 


Two 24-bit decrementing timers will be implemented. When the timers interrupt enable bit is set to one and 
the counter decrements to zero, the timer will assert the associated interrupt signal. The interrupt signal will assert one 
of the 32 external interrupts defined by the El bits in the control register. When a timer reaches zero, the timer 
hardware reloads the counter with the value from the timer initial count register and continues decrementing. 

Each timer is controlled and initialized by two registers: a timer control register and an timer initial count 
register. These registers are all memory mapped I/O registers. 


Timer Control register: 
OlL234 23 24 31 
TLCBIB reserved ~ pre-scalar 
TCR 
Pre-Scalar (PS): A pre-scalar value can be used to divide the input clock. 
Interrupt Enable bit (IE): When IE is set to one and the counter decrements to zero, the timer asserts its 


interrupt signal to interrupt the CPU. 
Counter Enable bit (CE): Setting the CE bit to one causes the timer to begin decrementing. Setting the 


CE bit to zero stops the timer. 
Timer Interrupt bit (Tl): The timer sets this bit to one to indicate that it has decrement to zero. This bit 


remain one until software sets it to zero. 


Timer Initial Count Register: 
0 78 31 


reserved Timer Initial Count 


TICR 
A 24-bit read/write register for the initial counter value. 
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8.4 Serial VO 
The serial I/O megacell implements a full-duplex, bi-directional UART with FIFO. 


input Butter. Input Shift Reg. q¢— SIN 


Output Butter [Quiput Shit > SOUT 
Peripheral 


Control Logic 


Interface Control Register 
Status Register Timing generator 


Serial VO megacell ¢— osc 
Figure 8.8 Serial VO with FIFO 


8.4.1 UART Register Definition 


PT Besexiption 


3F8, DLAB =0 RBR[0:7] - Receiver Buffer Register. 
- Read only. 
- bit 7 is LSB. 


3F8, DLAB =0 THR[O:7] - Transmitter Holding Register. 
- Write only. 
- bit 7 is LSB. 


1 3F9, DLAB=0 TER[3:7] ~ Interrupt Enable Register. 
* bit 7: Irpt_RDA enable (1/0- Enable/Disable). 
* bit 6: Irpt THRE enable (1/0- Enable/Disable). 
* bit 5: Irpt_RLS enable (1/0- Enable/Disable). 
* bit 4: Irpt_MOS enable (1/0- Enable/Disable). 
- bit 3: Loop-back enable (1/0- Enable/Disable). 


| 0 | 3F8, DLAB=1 | DLL{0:7] [| * Divisor Latch Register (LS). 
i | 3F9, DLAB=1_ | DLM[0:7]_| * Divisor Latch Register (MS). 


2 | 3FA TR[0:7] - Interrupt Ident. Register. 
- Read only. 
* bit 7: No Irpt pending (1/0- True/False). 
* bit 6: Inpt ID bit (2). 
* bit 5: Inpt ID bit (1). 
* bit 4: Irpt ID bit (0). 
- bit 3: DMA mode select (1/0- Mode 1/Mode 0). 
- bit 2: RCVR trigger (LSB). 
- bit 1: RCVR trigger (MSB). 
- bit 0: FIFO mode enable (1/0- Enable/Disable). 


Winbond W90210F 


33 Version 1.4, 10/8/97 


The above infornstion is the exclusive intelloctus! propesty of Winkond Electronics Comp, ark! shell nt be disclosed, dstritutes or epradused without permission trom Winbond 


Winbond W90210F 


EY” Electronics Corp. 
2 FCR[0:7] - FIFO Control Register. 
- Write only. 
* bit 7: FIFO mode enable (1/0- Enable/Disable). 
- bit 6: Reset RCVR FIFO. (self_clearing bit) 
- bit 5: Reset XMIT FIFO. (self_clearing bit) 
- bit 4: DMA mode select (1/0- Mode |/Mode 0). 
- bit 3: (Reserve). 
- bit 2: (Reserve). 
* bit 1: RCVR trigger (LSB). 
* bit 0: RCVR trigger (MSB). 
3 LCR[0:7] - Line Control Register. 
* bit 7: Word length select (LSB). 
* bit 6: Word length select (MSB). 
- bit 5: Number of stop bit. 
- bit 4: Parity enable. (1/0- Enable/Disable) 
- bit 3: Even parity select. (1/0- Even/Odd parity) 
- bit 2: Stick parity enable. (1/0- Enable/Disable) 
- bit 1: Set break. 
- bit 0: Divisor Latch Access Bit (DLAB). 
ne 
[| 


TOR[O:7] - Time Out Register. 


- bit 7 ~ 1: Time out bit-count. 

- bit 0: Irpt_ TOUT enable. (1/0- Enable/Disable) 
LSR[0:7] - Line Status Register. 

- Read only. 

- Write: Null operation. 


- bit 7: Data Ready (DR). 

- bit 6: Overrun Error (OE). 

- bit 5: Parity Error (PE). 

- bit 4: Framing Error (FE). 

- bit 3: Break Interrupt (BI). 

- bit 2: THR Empty (THRE). 

- bit 1: Transmitter Empty (TEMT). 

- bit 0: Error in RCVR FIFO (Err_RCVR). 


- MODEM Status Register: non-exist 
- Write: Null operation. 
- Read: Get 8'b0 
- ee Register. 
- ae UC 


Note: 1. Irpt_RDA: Received Data Available interrupt. 
Irpt_THRE: Transmitter Holding Register Empty interrupt. 
Irpt_RLS: Receiver Line Status Interrupt. 
Irpt_ MOS: MODEM Status Interrupt. 
Irpt_TOUT: Receiver Time OUT Interrupt. 


2. Baud rate = Frequency input / (16 * ({DLM, DLL} + 2)) 
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3. Interrupt Identification: 


PURI) | URIS] | URI) | URI7I | Priority | Irpttype | 


* Trpt_RLS- caused by: Overrun Error or Parity Error or Framing Error or Break Interrupt. 
- reset by: Reading LSR. 
* [rpt_RDA- caused by: Received data >= RCVR trigger level. 
- reset by: Reading RBR or RCVR FIFO drops below the trigger level. 
* Irpt_TOUT- caused by: RCVR FIFO is non-empty and have not been accessed (Read/write) for the 
time >= TOUR[L:7]. 
- reset by: Reading RBR. 
* Irpt_THRE- caused by: THRE has been set. 
- reset by: Reading IIR (if source of INTR is Irpt_THRE) or writing THR. 
* Irpt MOS- MODEM Status interrupt: Non-implemented. 


4, RCVR Interrupt trigger level programing: 


Po ft Tt bytes 


po | Bytes 


3. FCR[7] is always 1. Write FCR[7] to 0 has no effect. 


6. Transimitter/Receiver Character length programing: 


0 tS bits 
po fT its 
ae ee eee ee 
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8.5 Parallel Port 


The parallel port megacell implements the IEEE 1284 parallel port. The IEEE 1284 standard provides for high 
speed bi-directional communication between the PC and an external peripheral. 


The parallel port defines 5 modes of data transfer. Each mode provides a method of transfering data in either 
the forward direction, reverse direction, or bi-directional data transfer. The defined modes are: 
Standard parallel port mode 
PS/2 parallel port mode 
Parallel port FIFO mode 
ECP parallel port mode 
Centronix Peripheral mode (Vendor specified mode) 


Other modes defined in the IEEE 1284 standard like test mode and configuration mode are also supported. 


8.5.1 ECP Register Description 


1, Data Register (offset 378) R/W 
} 7 


This is the standard parallel port data register. Writing to this register in Standard mode shall drive data to the 
parallel port data lines. In all other modes the drivers may be tri-stated by setting the direction bit in the der 
register. Read to this register return the value on the data lines. 

Standard mode: 


write data_reg: cpu_data[0:7}> data_reg[0:7]— PAD_ED[0:7] 
read data_reg: data_reg[0:7}> cpu_data 

PS/2 mode, forward: 
write data_reg: cpu_dda — data_reg— PAD_ED 
read data_reg: data_reg—> cpu_data 

PS/2 mode, reverse: 
write data_reg: cpu_data— data_reg 
read data_reg: PAD_ED—> cpu_data 

Centronix Peripheral mode: 
read data_reg: PAD_ED-> cpu_data 

Other mode: 
write data_reg: cpu_data[0:7}> data_reg[0:7] 
read data_reg: undefined 


2. DSR register (offset 379) Read only 
i) Z 


This read-only register reflects the inputs on the parallel port interface. 
Bit [0]- nBusy: inverted parallel porBusy signal 
Bit [1]- nAck: parallel portnAck signal 
Bit [2]- PError: parallel portPError signal 
Bit [3]- Select: parallel portSelect signal 
Bit [4]- nFault: — parallel portnFault signal 
Bit [5:7]- reserved 


3. DCR register (offset 37a) R/V 
) Zz 


This register directly controls several output signals as well as enabling some functions. The drivers for nStrobe, 
nAutoFd, nlnit, and nSelectIn are open-collector in standard mode. 
Bit [0:1]- reserved 
Bit [2]- Direction 
0: forward (default) 
Drivers are enabled. 
1: reserved 
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In Standard mode or Parallel FIFO mode, this bit is forced to 0. The drivers are enabled, i.e. the 
data pins of the parallel port are always outputs. Otherwise, this bit tri-states the data output 
drivers, so that data will be read from the peripheral. 
Bit [3]- ackIntEn 
1; Enable an interrupt on the rising edge of nAck. 
0: Disable the nAck interrupt (default) 
Bit [4]- SelectIn; is inverted and then driven as parallel prot nSelectin (default 1). 
Bit [5]- nlnit; is driven as parallel port ninit (default 1). 
Bit [6]- autofd; is inverted and then driven as parallel port nAutoFd (default 0). 
In centronic peripheral mode, when the nAck is active, the bit will be cleared by hardware. 
Bit [7]- strobe; is inverted and then driven as parallel port nStrobe (default 0). 


4. ECR register (offset 243) (RAW) 
0 Z 


Bit[0:2]- mode (R/W) 
000: Standard parallel port mode (default). 
In this mode, FIFO is reset and common collector drivers are used on the control lines (nStrobe, 
nAutoFd, ninit, and nSelectin). Direction bit is cleared to "0". 
001: PS/2 parallel port mode 
The direction could be forward or reverse. In reverse direction, reading the data register returns the 
value on the data lines not the value in the data register. 
010: Parallel port FIFO mode 
This is the same as Standard parallel port mode except that Pwords are written or DMAed to the 
FIFO. FIFO data is automatically transmitted using the standard parallel port protocol. Note that 
this mode is only useful when the direction bit is 0. 
011: ECP parallel port mode 
nthe forward direction, Pwords is placed into the FIFO and transmitted automatically to the 
peripheral using ECP protocol. In the reverse direction, bytes are moved from the ECP data port 
and packed into Pwords in the FIFO. All drivers have active pull-ups. 
100: Centronic peripheral mde 
nthis mode, the parallel port acts as a reverse port in centronics mode and the direction bit is 
forced to 1. The nAutofd bit (DCR bit 6) is cleared, nAck is active until nAutofd bit (DCR bit 6) is 
set to 1 by software. And the parallel port data will be latched in the data register. 
101: Reserved 
110: Test mode 
nthis mode, the FIFO may be read or written, but the data will not be transmitted on the parallel 
port. Using this mode to test the depth of the FIFO, the write-threshold, and the read-threshald. 
111; Configuration mode 
nthis mode, the CNFGA and CNFGB registers are accessible at addresses 244 and 246 
Bit[3]- nErrintrEn (R/W, Valid only in ECP mode) 
1: Disable the interrupt generated on the asserting edge of nFault (default). 
0: Enables an interrupt pulse on the high to low edge of nFault. 
Note that an interrupt pulse will be generated if nFault is asserted and this bit is written from a "1" to a 
"0". This prevents interrupts from being lost in the time between the read of the ecr and the wrtie of the 
ecr, 
Bit[4]- dmaEn (R/W) 
1: Enables DMA, DMA starts when servicelntr (bit 5) is 0. 
0: Disables DMA unconditionally (default). 
Bit[5]- servicelntr (R/W) 
1: Disables DMA and all of the service interrupts (default). 
Q: Enables one of the following 3 cases of interrupts. Once one of the 3 service interrupts has 
occurred, servicelntr bit shall be set to a "1" by the hardware. Writing this bit to a "1" will not cause 
an interrupt. 
case 1:dmaEn=1 
During DMA (this bit is set to a 1 when terminal count is reached) 
case 2:dmaEn =0, direction = 0 
This bit shall be set to 1 whenever there are writelntrThreshold or more Pwords free in the 
FIFO. 
case 3: dmaEn =0, direction = 1 
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This bit shall be set to 1 whenever there are readIintrThreshold or more valid Pwords to be read 
from FIFO. 
Bit[6]- Full (Read only) 
1: direction =O The FIFO cannot accept another Pword. 
1: direction = 1 The FIFO is completely full. 
0: direction = 0 The FIFO has at least 1 free Pword 
0: direction = 1 The FlFChas at least 1 free byte. 
Bit[7]- empty (Read only) 
1: direction = 0 The FIFO is completely empty 
41: direction = 1 The FIFO contains less than 1 Pword of data 
0: direction = Q The FIFO contains at least 1 byte of data 
0: direction = 0 The FIFO contains at least 1 Pword of data 


5. CONFIGA register (offset 244) (RAV only in configuration mode) 
0 Zz 


Bit [0]- Indicates if interrupts are pulsed or level (Read only) 
0: pulse 
1: level 
Bit [1:3 ]- Pword size (R/W) 
001: Pword size = 1 byte 
010; Pword size = 4 byte 
000 and 011 ~ 111: reserved 
Bit [4]- reserved 
Bit [5]- nBytelnTransceiver (Read only) 
0: When transmiting (at host recovery), there is one byte in the transceiver waiting to be transmitted 
that does not affect the FIFO full bit. 
6:7]- Snapshot of the Pword 
This field is not used for Pword size of 1 byte. 
For host recovery situations these bits indicate what fraction of a Pword was not transmitted so that 
software can re-transmit the unsent bytes. If the Pword size is 4 bytes the value of these two bits is a 
snapshot of the last Pword being transmitted in mode 011 event 35 when the FIFO was reset (port 
was transitioned from mode 011 to mode 000 or 001) 
00- the Pword at the head of the FIFO contained a complete Pword 
01- the Pword at the head of the FIFO contained only 1 valid bytes. 
10- the Pword at the head of the FIFO containeed 2 valid bytes. 
11- the Pword at the head of the FIFO contained 3 valid bytes. 


6. Reverse address register (offset 245) (Read only) 
0 7 


Bi 


Bit [0:1]- Reserved 

Bit [2]- Tag_all 
1: To indicate the unread bytes of the FIFO storing the reverse data/ command that has at least 
one address bytes. 
0: There is no address byte in the FIFO 

Bit [3:6]- TagO, Tag1, Tag2, Tag3 
to check if there is one byte of the following read Pword = 4 bytes is the reverse address. TagO, 
Tag1, Tag2 and Tag3 are individually for the byteO, byte1, byte2 and byte3 of the Pword 

Bit [7]- Tag 
to check if the byte of the following read Pword (1 byte) is the reverse address. 
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9. Timing Diagram 


9.1 Memory controller 
9.1.1 DRAM AC Timimg 


PCLK ibe 
tay 
MAt1 - MAO CX. ee 
tds, tdh 
a i 
MD31 - MDO ee es a ES 
try + ty 
RAS3# - RASO# 
tev: te 
CAS3# - CASO# 


+ ty 
WE# f / 


| Symbol | __ Parameter | Min, S| Max | Unit 
|_tyi _[RAS# valid delay ref_toPCLKrising [ns 
|_tryo___|RAS# valid delay ref_toPCLK rising | | ns 
|_teyi _|CAS# valid delay ref toPCLK rising | | ns 
|_tryo _|RAS# valid delay ref_toPCLKrising | | ns 


|_twy [WE validdelay ret toPCLK rising | | ns 
|_tis [Memory datasetuptime Ts 
|_ tin [Memory dataholdtime Pts 
| tay [Memory address validdelay | | ss 


9.1.2 ROM AC Timimg 
9.1.2.1 Flash ROM Write Timimq 


PCLK 
MAt9 - MAO SS 
tas 
RCSO# - 
tes 
ROMRW# 


twp 


—_— | 
ROMOE# 


tds 
MD31 - MDO 
tah 
[Symbol | CéParameter i Unit 
| tag [Address setup time ns 
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Chip select setup time 


D 
9.1.2.2 ROM Read Timimg 


PCLK 


tac 
Mate- Mao > 


tes 


RCS0# - 


ROMRW# 


+ top + 
ROMOE# 


tds 4] 
MD31 - MDo 
tdh 


| Symbol | Parameter | Min | Max | Unit _| 
|_tan _[Accesstime PCL K 
|_tos __|Chip select setup tome a a 


| ton [Output enable pulse es ee ee 
| tys __|Data setup tome ee ee 
| tan [Data hold time Pos 
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9.2 DMA Controller 


9.2.1 DMA device register read timing 
DMA device register read timing 


oro | J PP 


valid data 
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9.2.2 DMA device register write timing 
DMA device register write timing 


valid data 


| | | 
| | i 
| ! | 
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DMA cycle -- data read timing (demand mode) 


9.2.3 DMA demand mode dala read cycles 


Ey 


XE 
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DMA cycle -- data write timing (demand mode) 


9.2.4 DMA demand mode data write cycles 
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DMARDY 
DA«<0:11> 


Electronics Corp. ~~ 


DMA cycle -- data read timing (block mode) 
I 
| 


9.2.5 DMA block mode data read cycles 


Ey 


XE 
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9.2.6 DMA block mode data write cycles 


DMA cycle -- data write timing (block mode) 


DREQ 


DACK 


low 


DMARDY 


DA«<0:11> 


ROM/FLASH Read timing 


22 22 22 
2 qd = aan ea - nal u i ‘= 
d 
_ a a _ _ 2 > os = ae _ a ee = _ = 


RCS. 


MADDR<0:11 
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FLASH Write timing 


RCS_ 
ROMEN ' i | | | | | | | | | 1 | 1 | 1 
ROM_OE.” 
es ee eG PO 
a Ge 


ROM_RWI— |] cy 


a 

| 7 i T r r 7 1 y r 1 ; 1 ; , | 

MD<0:31> 

or T ' 1 
MD<«<0:15> | | | | | | | | | | 1 1 1 1 1 1 
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Halfword parallel add HADD 
Format: HADD, cmplt rtr2t 
Os S10 1118 26 2731 
02 r2 | ri [0 bp] 3 feat] t 
6 5 5 31 4 21 5 


Purpose: To add multiple pairs of halfwords in parallel with optional saturation. 


Description: The corresponding halfwords of GR rl and GR r2 are added together in parallel. Optional 

saturation is performed, which forces each halfword result to either the maximum or the 
minimum value, if the result would have been out of the range of the target forinat. The 
halfword results are placed in GR t. 
The completer, cmplt, determines whether modular, signed-saturation, or unsigned- 
saturation arithmetic is performed. When no completer is specified (sat=3) modular 
arithmetic is performed. The completer "ss" (sat=1) designates signed saturation, The 
coinpleter "us" (sat=0) indicates unsigned saturation. For signed saturation, all operands are 
treated as signed numbers, and the results are signed numbers. For unsigned saturation, the 
first operands, from GR rl, are treated as unsigned numbers, the second operands, from GR 
r2, are treated as signed numbers, and the results are unsigned numbers. 


Operation: GR[t]{0..15} — GR[rl]{0..15} + GR[r2]{0..15}; 
GRit] {16.31} — GR[rl]{16..31} + GR[r2]{16..31}; 
switch (crmplt) { 
case ss: if (max_signed_sat_L) /* sat=1 */ 

GR[t]{0..15} < Ox7FFF; 

else if (min_signed_sat_L) 
GR[t]{0..15} — 0x8000; 

if (max_signed_sat_R) 
GR[t]{16..31} <— Ox7FFF; 

else if (min_signed_sat_R) 
GR[t]{16..31} — 0x8000; 

break; 

case Ss: if (max_unsigned_sat_L) 7* sat=0 */ 

GR[t]{0..15} < OxFFFF; 

else if (min_unsigned_sat_L) 
GR{t]{0..15} — 0x0000; 

if (max_unsigned_sat_R) 
GR[t]{16..31} — OxFFFF; 

else if (min_unsigned_sat_R) 
GRI[t]{16..31} — 0x0000; 


break; 
default: /* sat=3 */ 
break; 
} 
Exceptions: None. 
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Halfword parallel subtract HSUB 
Format: HSUB cmplt rt,2t 
OS $10 WAS 26 27:31 
02 r2 xl | 0 (O} 1 Isat ot 
6 5 5 Bok 4. BRS. 


Purpose: To subtract multiple pairs of halfwords in parallel with optional saturation. 


Description: The corresponding halfwords of GR r2 are subtracted from the halfwords of GR rl in 

parallel. Optional saturation is performed, which forces each halfword result to either the 
maximuin or the minimum value, if the result would have been out of the range of the target 
format. The halfword results are placed in GR t. 
The coinpleter, cmplt, determines whether modular, signed-saturation, or unsigned- 
saturation arithmetic is performed. When no completer is specified (sat=3) modular 
arithinetic is performed. The completer "ss" (sat=1) designates signed saturation. The 
completer "us" (sat=0) indicates unsigned saturation. For signed saturation, all operands are 
treated as signed numbers, and the results are signed numbers. For unsigned saturation, the 
first operands, from GR rl, are treated as unsigned numbers, the second operands, from GR 
r2, are treated as signed numbers, and the results are unsigned numbers. 


Operation: GR[t]{0..15} — (GR[rl]{0..15} +-— GR[r2]{0..15} + 1); 
GR[t]{ 16.31} — (GR[r1]{ 16.31} +— GR[r2]{ 16.31} + Ds 
switch (cmplt) { 
case ss: if (max_signed_sat_L) 7* sat=| */ 

GR[t]{0..15} — Ox7FFF; 

else if (min_signed_sat_L) 
GR[t]{0..15} — 0x8000; 

if (max_signed_sat_R) 
GRit]{16..31} <— Ox7FFF; 

else if (min_signed_sat_R) 
GR{t]{ 16..31} — 0x8000; 

break; 

case ss: if (max_unsigned_sat_L) /* satzO */ 

GR[t]{0..15} — OxFFFF; 

else if (min_unsigned_sat_L) 
GR{t]{O..15} — 0x0000; 

if (imax_unsigned_sat_R) 
GR[t]{ 16.31} — OxFFFF; 

else if (min_unsigned_sat_R) 
GR{t]{16..31} — 0x0000; 


break; 
default: /* sat=3 */ 
break; 
} 
Exceptions: None. 
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Halfword parallel average HAVE 
Format: HAVE 11,12, 
OS $10 WAS 26 27:31 
02 r2_| r1 [9 P| ob ff t 
6 5 5 31 6 1 5 


Purpose: ‘To average multiple pairs of halfwords in parallel. 


Description: The corresponding halfwords of GR rl and GR r2 are averaged in parallel. Both operands 
are unsigned. The average is obtained by adding the corresponding halfwords, and shifting 
the result right by one bit, to perform a divide by 2, with the halfword carry bit from the 
addition shifted back into the leftmost position of each result. The halfword results are 
placed in GR t. 

Unbiased rounding is performed on the result of summation, to reduce the accurnulation of 
rounding errors with cascaded operations. 


Operation: 
cat(carry_L, sum{0..15}) — GR[rl]{0..15} + GR[r2]{0..15} 
cat(carry_R, sum{16..31}) — GR[rlJ{ 16.31} + GR[r2]{ 16.31} 
new_lIsb_L — sum{ 14} | sum{ 15}; /* unbiased rounding */ 
new_lsb_R — sum{30} | sum{31}; /* unbiased rounding */ 
GR[t] {0.15} < cat(carry_L.sum{0..13}, new_Isb_L); 
GR[t]}{ 16.31} — cat(carry_L,sum{ 16..29}, new_lsb_R); 

Exceptions: None. 
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Halfword parallel shift left and add HSHLADD 
Format: HSHLADD r1,k,r2,t or HSL1ADD r,t 
HSL2ADD r1,r2t 
HSL3ADD r1,r2t 
Os 510 WAS 26 27:31 
02 re x Oo jo} 7 |kiy t 
6 5 5 3.21 fa. 22k. “5 


Purpose: = To perform multiple pairs of halfword shift left and add operations in parallel with 
saturation. 


Description: Each halfword of GR rl is shifted left by k bits, and then added to the corresponding 
halfword of GR r2. Signed saturation is performed on the addition, which forces each 
halfword result to either the maximum or the minimurn value, if the result would have been 
out of range. The halfword results are placed in GR t. The shift amount is either 1, 2, or 3, 
and is encoded in the k field of the instruction. 

All operands are treated as signed numbers, and the results are signed nutnbers. Signed 
saturation is performed. 

For this instruction, signed saturation is based both on the shift operation and the add 
operation. That is, if the result of the shift operation is not representable in 16 bits, signed 
saturation occurs. If GR rl. was positive, maximum saturation occurs. If GR rl. was negative, 
minimum saturation occurs. If the result of the shift operation is representable in 16 bits, 
then saturation is determined by the add operation in the normal fashion. 


Operation: GR[t]{0..15} < Ishift(GR[rl]{0..15},k) + GR[r2]{0..15}; 
GR[t]{16..31}  Ishift(GR[rl]{ 16.31 }.k) + GR[r2]{ 16.31}; 
if (max_signed_sat_L) 

GR{t]{0..15} <— Ox7FFF; 
else if (min_signed_sat_L) 

GR[t]{0..15} — 0x8000; 
if (max_signed_sat_.R) 

GR{[t]{16..31} — Ox7FFF; 
else if (min_signed_sat_R) 

GR[t]{16..31} <— 0x8000; 

Exceptions: None. 
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Halfword parallel shift right and add HSHRADD 
Format: HSHRADD r1,k,r2,t or HSR1ADD r,t 
HSR2ADD r,r2,t 
HSR3ADD ritat 
Os 510 WAS 26 2731 
02 re fal 0 fo} 5 {kp} t 
6 5 5 BL 4. 21 5 
Purpose: = To perform multiple pairs of halfword shift right and add operations in parallel with 
saturation. 


Description: Each halfword of GR rl is shifted right by k bits, and then added to the corresponding 
halfword of GR r2. The bits shifted into each halfword, from the left, are the same as the 
sign bit for each halfword. Signed saturation is performed on the addition, which forces each 
halfword result to either the maximum or the minimum value, if the result would have been 
out of range. The halfword results are placed in GR t. The shift amount is either 1, 2, or 3, 
and is encoded in the k field of the instruction. 

All operands are treated as signed numbers, and the results are signed numbers. Signed 
saturation is performed. 


Operation: GR[t]{0..15} — arshift(GR[rl]{0..15}.k) + GR[r2]{0..15}; 
GRit]{16..31} — arshift(GR[rl]{ 16..31},k) + GR[r2]{ 16.31}; 
if (max_signed_sat_L) 

GRI{t]{0..15} — Ox7FFF; 
else if (min_signed_sat_L) 

GR[t]{0..15} <— 0x8000; 
if (max_signed_sat_R) 

GR[t}{ 16..31} — Ox7FFF; 
else if (min_signed_sat_R) 

GR{t]{16..31} — 0x8000; 

Exceptions: None. 
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Appendix B. Diagnostic Instructions 


HALT 
Format: HALT 

OS 5:10 1115 2125 26 2731 

05 = A ee ee 

6 5 5 2°38 Sh ae 5 
Purpose: To halt instruction pipeline and entry ICE single-step mode. 
Description: The HALT instruction clears instruction pipeline. Any unfinished bus cycle and internal I/D- 

cache operation will be cleared before CPU entering single-step mode. 

Operation: Enforce CPU clear pipeline and entry single-step mode; 
Note: This instruction can be executed by code running at any privileged level. (different from other 


diagnostic instr.) 
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Move to AIR MTAIR 
Format: MTAIR rt 
OS $10 WAS 2125 26 2731 
05 t r [-|-| 00 FT - 
6 5 5 ew 5 5 
Purpose: To copy value into a specified AIR from a general register. 
Description: If the AIR[t] is existed, the contents of GR[r] is copied into AIR[t]. If AIR[t] has n bits where 
n<=32, the least significant n bits of GR[r] are moved into AIR[t]. 
Operation: if(t > 6) 


undefined operation; 
else if(priv |= 0) 
privilege instruction trap; 


else 
AIR[t] <-- GR[1; 
Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
Notes: AIR[O]: Internal configuration register 


- bit31: Internal |-Cache enable (0/1- disable/enable) 
- bit30: Internal D-Cache enable (0/1- disable/enable) 
- bit29: Burst write enable (0/1- disable/enable) 
- bit28: Default endian bit (0/1- big/little endian) 
- bit27: Trap step mode able (0/1- disable/enable) 
- bit26: reserved 
- bit25: reserved 
- bit24: Enter Sleep state 
- bit23: Multiplier wait state (0/1- 0/1 wait state) 
- bit22: Freeze 1st 1K of |-Cache (0/1- disable/enable) 
- bit21: Freeze 2nd 1K of |-Cache (0/1- disable/enable) 
~ bit20: Freeze 3rd 1K of I-Cache (0/1- disable/enable) 
- bit19: Freeze 4th 1K of |-Cache (0/1- disable/enable) 
(default: 13'bO) 

AIR[1]: PSW register (default: 32'h0) 

AIR[2]: TMR (timer register) 

AIR[3]: Non-cacheable Offset regigtr 

AIR[4]: Non-cacheable Mask register 

AIR[5]: Write-Through Offset register 

AIR[6]: Write-Through Mask register 

AIR[7]: PCO register (program counter) 
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Move from AIR MFAIR 
Format: MFAIR rt 
OS $10 WAS 2125 26 2731 
05 r —"|-[-[ 01 FT 
6 5 5 Gn 8 5. 2 5 

Purpose: To copy value into a general register from AIR register. 

Description: If the AIR[r] is existed, the contents of AIR[r] is copied into GRIt]. If AIR[r] has only n bits 
where n<=32, the least significant n bits of AIR[r] are moved into GR[t] and the others are 
zero, 

Operation: if(t > 6) 

undefined operation; 
else if(priv != 0) 

privilege instruction trap; 
else 

GRit] <-- AIR[r]; 

Exception: Privilege instruction trap. 

Restriction: This instruction can be executed only by code running at the most privileged level. 

Notes: AIR[Q]: Internal configuration register 
AIR[1]: PSW register 
AIR[2]: TCP (timer comparator register) 

AIR[3]: Non-cacheable Offset register 
AIR[4]: Non-cacheable Mask register 
AIR[5]: Write-Through Offset register 
AIR[6]: Write-Through Mask register 
AIR[7]: PCO register (program counter) 
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Move to Itag MTITAG 
Format: MTITAG b 
OS 510 WAS 2125 26 2731 
05 b -—"|-[- [98 FT - 
6 2 5 a. 8 5: i 5. 
Purpose: To copy a value into tag from a general register. 
Description: GR ris copied into a specified entry of Itag. 
Operation: entry <-- GR[b][24:31]; 
ltaglentry][0:20] <-- GR[b][0:20]; 
Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
Note: Itag[entry][0:19]: tag field. 
ltag[entry][20]: valid bit. 
Move from Itag 
Format: MFITAG b,t 
Os S10 T1415 2125 26 2731 
05 b - J-[-[ 09 Hot 
6 2. 5 2 3 5 1 5 
Purpose: To copy a value into general register from ltag. 
Description: The content of a specified ltag_entry is copied into GR t. 
Operation: way <-- AIR[O][26]: 
entry <-- {way, GR[b][25:31]}; 
GR[t][0:21] <-- Itaglentry][0:21] 
Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
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Move to I-Cache 
Format: 


05 510 


W90210F 


05 b r |-|- 


6 


Purpose: 
Description: 
Operation: 


5 


Exception: 
Restriction: 


MTICAH 
MTICAH rb 
1145 2125 28 2731 
OA HLH - 
5 2 3 5: 35 


To copy a value into |-Cache from a general register. 

GR r is copied into specified |-Cache entry. 

entry <-- GR[b][21:27]; 

word <-- GR[b][28:29]; 

way <- AIR[0][26]; 

|-Cache[way, entry, word] <-- GR[r]; 

Privilege instruction trap. 

This instruction can be executed only by code running at the most privileged level. 
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Move from I-Cache MFICAH 
Format: MFICAH bt 
OS 510 WAS 2125 26 2731 
05 b —"|-[- [8 FT t 
6 5 5 a 3 5; 2b 35. 
Purpose: To copy a value into general register from |-Cache. 
Description: A word of specified |-Cache entry is copied into GR t. 
Operation: entry <-- GR[b][21:27]; 
word <-- GR[b][28:29]; 
way <- AIR[0][26]; 
GRit] <-- |-Cache[way, entry, word]; 
Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
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Move to Dtag MTDTAG 

Format: MTDTAG b 

OS 510 WAS 2125 26 2731 

05 b —|-[- [0c FT - 

6 2 5 a 2 5: 35 
Purpose: To copy a value into Dtag from a general register. 
Description: GR r is copied into a specified entry of Dtag. 
Operation: entry <-- GR[b][25:31]; 

ltaglentry][0:22] <-- GR[b][0:22]; 

Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
Note: Itag[entry][0:21]: tag field. 


The above infeemstion is 


ltag[entry][22]: valid bit. 
Itagfentry][23]: dirty bit. 


59 


the exclusive intellectual propesty of Winbond Electronics Comp. and shall not be disclosed, detnibuted or reprodused without permission fron Winbond 


Version 1.4, 10/8/97 


Winbond 


W90210F 


EY” Electronics Corp. ~~ 
Move from Dtag MFDTAG 

Format: MFDTAG bt 

OS $10 WAS 2125 26 2731 

05 b —"|-[- | o@ FT t 

6 2 5 Gr 5 1 5 
Purpose: To copy a value into general register from Dtag. 
Description: The content of a specified Dtag_entry is copied into GR t. 
Operation: entry <-- GR[b][25:31]; 

GRIt][0:22] <-- Itaglentry][0:22] 

Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
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Move to D-Cache MTDTAG 

Format: MTDCAH rb 

OS 510 WAS 2125 26 2731 

05 b r [-|-| o% H- 

6 5 5 a 8 5 2 35 
Purpose: To copy a value into D-Cache from a general register. 
Description: GR r is copied into specified D-Cache entry. 
Operation: entry <-- GR[b][21:27]; 


word <-- GR[b][28:29]; 
|-Cache[entry, word] <-- GR[r]; 


Exception: Privilege ingruction trap. 
Restriction: This instruction can be executed only by code running at the most privileged level. 
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Move from D-Cache MFDCAH 
Format: MFDCAH bt 
OS 510 WAS 2125 26 2731 
05 b —"|-[- | of FT 
6 2 5 2 3 5 1 5 
Purpose: To copy a value into general register from D-Cache. 
Description: A word of specified D-Cache entry is copied into GR t. 
Operation: entry <-- GR[b][21:27]; 
word <-- GR[b][28:29]; 
GRit] <-- |-Cache[entry, word]; 
Exception: Privilege instruction trap. 
Restriction: This instruction can be executed only by code mning at the most privileged level. 
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Halfword Parallel Multiply 


Format: HPMPY,cmplt = r1,r2,t 


Os e10 1145 


os per Pot ae pe 
al 


6 5 5 


2125 26 2731 


N 


Se ts 15: 


2 


Purpose: To multiply multiple pairs of halfwords in parallel with optional saturation. 


HPMPY 


Description: The corresponding halfwords of GR r]J and GR r2 are multiplied together in parallel. Optional 
saturation is performed, which forces each halfword result to either the maximum or the 
minimum value, if the result would have been out of the range of the target format. The halfword 
results are placed in GR f. 
The completer, cmp/t, determines whether modular, signed-saturation, or unsigned-saturation 
multiplication is performed. When no completer is specified modular arithmetic is performed. 
The completer "ss" designates signed saturation. The completer "ws" indicates unsigned 
saturation. For signed saturation, all operands are treated as signed numbers, and the results are 
signed numbers. For unsigned saturation, the first operands, from GR r/, are treated as unsigned 
numbers, the second operands, from GR r2, are treated as signed numbers, and the results are 
unsigned numbers. 


Operation: 
switch(cmplt) { 


case u(g=0, sat=00, unsigned multiplication) { 


case s(g=1, sat=00, signed multiplication) { 


case us(g=0, sat=01, unsigned multiplication with saturation) { 


GR[t](0..15} — zero_ext(GR[rl]{0..15}) x zero_ext(GR[r2]{0..15}) 


GR[t}{16..31}  zero_ext(GR[rl]{16..31}) x zero_ext(GR[r2]{ 16..31}) 
} 


GR[t]{0..15} — sign_ext(GR[rl]{0..15}) x sign_ext(GR[r2]{0..15}) 
GR[t]{16..31} <— sign_ext(GR[r1]{ 16..31}) x sign_ext(GR[r2]{16..31}) 
} 


GR[t]{0..15} — zero_ext(GR[rl]{0..15}) x zero_ext(GR[r2]{0..15 }) 


GR[t]{ 16.31} < zero_ext(GR[rl]{ 16..31}) x zero_ext(GR[r2]{ 16..31 }) 
if (unsigned_sat_L) GR[t]{0..15} <— OxFFFF; 

if (unsigned_sat_R) GR[t]{16..31} — OxFFFF; 

break; 

} 


case ss(g=1, sat=01, signed multiplication with saturation) { 


default: 


} 


Exception: 
Restriction: 


GR[t]{0..15} — sign. ext(GR[rl]{0..15}) x sign ext(GR[r2]{0..15}) 
GR[t]{ 16.31} © sign_ext(GR[rl]{ 16.31 }) x sign_ext(GR[r2]{ 16..31}) 


if (pos_signed_sat_L) GR[t]{0..15} + Ox7FFF; 
else if (neg_signed_sat_L) GR[t]{0..15} — 0x8000; 

if (pos_signed_sat_R) GRIt]{16..31} — Ox7FFF; 
else if (neg_signed_sat_R) GR[t]{16..31} — 0x8000; 

break; 

} 

break; 

None 


Winbond defined instruction for W90210F. 
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Halfword Multiply HMPY 
Format: HMPY, cmplt = r1,r2,t 


re 
5 


6 


Purpose: — To multiply corresponding halfwords of two registers. 


Description: The corresponding 16-bit halfwords of GR r/ and GR r2 are interpreted as signed or unsigned 
16-bit integers and are arithmetically multiplied together. The 32-bit result is placed in GR f. 


The cmplt completer is specified by the g and the c bits in the instruction. 
Operation: 


switch (crnplt) { 
case ubh (g=0, c=00, unsigned multiplication) { 

GR[t]{0..31} < zero_ext(GR[rl]{0..15}) x zero_ext(GR[r2]{0..15 }) 

break; 

} 

case shh (g=1, c=00, signed multiplication) { 

GRIt] {0.31} < sign_ext(GR[rl]{0..15}) x sign_ext(GR[r2]{ 0..15}) 

break; 

} 

case uhl (g=0, c=01, unsigned tnultiplication) { 

GR[t]{0..31} <— zero_ext(GR[rl]{0..15}) x zero_ext(GR[r2]{16:31}) 

break; 

} 

case shl (g=1, c=O1, signed multiplication) { 

GR[t]{0..31} © sign_ext(GR[rl]{0..15}) x sign_ext(GR[r2] { 16:31} 

break; 

} 

case ulh (g=0, c=10, unsigned multiplication) { 

GR[t]{0..31} <— zero_ext(GR[rl]{16:31}) x zero_ext(GR[r2]{0..15}) 

break; 

} 

case slh (g=1, c=10, signed multiplication) { 

GR[t]{0..31} & sign_ext(GR[rl]{ 16:31 }) x sign_ext(GR[r2]{0..15}) 

break; 


case ull (g=0, c=11, unsigned multiplication) { 
GR[t]}{0..3L}  zero_ext(GR[rl]{16:31}) x zero_ext(GR[r2]{ 16:31}) 


case sll (g=1, c=1 1, signed multiplication) { 


GR[t]{0..31} © sign_ext(GR[rl]{16:31}) x sign_ext(GR[r2]{ 16:31}) 
break; 
} 
} 
Exception: None 
Restriction: Winbond defined instruction for W90210F. 


64 Version 1.4, 108/97 


The above information is the exousive intellectual property of Winbond Electronics Corp. and shall not be disclosed, distributed or reproduced without permission trom Winbond, 


Winbond 


XE EY” Electronics Corp. 


Halfword Absolute and Add 
Format: HABSADD, emplt rl, r2,t 


Os B10 W145 
6 5 


1617 18:20 2125 26 2731 
sat| - | 13 Foot 
2 3 §: ds 5 


HABSADD 


Purpose: = To add multiple pairs of halfwords in parallel with absolute and optional saturation. 


Description: The corresponding halfwords of GR rl are added with the halfwords of absoluted GR r2 in 
parallel. Optional saturation is performed, which forces each halfword result to either the 
maximum or the minimum value, if the result would have been out of the range of the target 
format. The halfword results are placed in GR t. 


The completer, cmplt, determines whether modular, signed-saturation, or unsigned-saturation 
arithmetic is performed. When no completer is specified (sat=3) modular arithmetic is 
performed. The completer "ss" (sat=1) designates signed saturation. The completer "us" (sat=0) 
indicates unsigned saturation. For signed saturation, all operands are treated as signed numbers, 
and the results are signed numbers. For unsigned saturation, the first operands, from GR rl, are 
treated as unsigned numbers, the second operands, from GR r2, are treated as signed numbers, 
and the results are unsigned numbers. 


Operation: 


if (GR[r2]{0} == 


else 


if(GR[r2]{ 16} == 


else 


switch (cmplt) { 


Exceptions: None 


CASE SS: 


Case us: 


default: 


} 


1) GRU[t{0..15} & GRirl]{0..15} + (~GR[r2]{0..15} + 1); 
GR[t}{O..15} <— GRfrl}{O..15} + GR[r2]{0..15} ; 

1) GRt{16..31} & GR6rl]{16:31} + (~GRE2]{ 16.31} + 1); 
GR[t}{16..31} — GRirl]{16:31} + GR[r2]{ 16.31}; 


if(max_signed_sat_L) 

GRIt]{O:15} <  Ox7FFF; 
else if (min_signed_sat_L) 

GR[t]{O:15} <— Ox8000; 
if(max_signed_sat_R) 

GR[t]{ 16:31} <— Ox7FFF; 
else if (min_signed_sat_R) 

GRi[t]{ 16:31} <— Ox8000; 
break; 
if(max_unsigned_sat_L) 

GR[t}{0:15} << OxFFFE; 
else if (min_unsigned_sat_L) 

GRIt]{0:15} <— 0x0000; 
if(max_unsigned_sat_R) 

GR[t]{ 16:31} << OxFFFF; 
else if (min_unsigned_sat_R) 

GR[t]{ 16:31} <— 0x0000; 
break; 


break; 


Restriction: § Winbond defined instruction for W90210F. 
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Load Halfword Unpacked LDHU 
Format: LDHU, cmplt = d(s,b),t 
Os S10 WAS 2126 26 2731 
05 b | ims [sBl[-] 14 fl t 
6 5 5 213 a Eee eh 
Purpose: To load a halfword and unpack into a general register. 


Description: The aligned halfword at the effective address is uppacked into two bytes, zero-extended to 
two halfwords and loaded into GR t. The completer, emplt, determines if the offset is the 
base register, b, or the base register plus the short displacement, d. The displacement is 
encoded in the im5 field. The completer, encoded in the a and m fields of the instruction, 
also specifies base register modification. If base register modification is specified and b=t, 
the value loaded is the unpacked halfwords at the effective address. 

Operation: switch (cmplt) { 

case MB: offset — GR[b] + low_sign_ext(im5,5); /* a=lym=l */ 
GR[b] — GR[b] + low_sign_ext(im5,5); 


break; 

case MA: offset + GR[b]; /* a=O0,m=1 */ 
GR[b] — GR[b] + low_sign_ext(im5,5); 
break; 

default: offset + GR[b] + low_sign_ext(im5,5); 7* m=0 */ 
break; 

} 
GR[t] — cat(zero_ext(mem_load(offset,0,7), 16), zero_ext(mem_load(offset,8,15),16)) 
Exception: None. 


Restriction: Winbond defined instruction for W902 LOF. 


Winbond W90210F 


66 Version 1.4, 10/8/97 


The above infornstion is the exclusive intelloctus! propesty of Winkond Electronics Comp, ark shell nt be disclosed, dstritutes or epradused without permission trom Winbond 


© Winbond 


XE EY” Electronics Corp. 


\ Winbond 


Electronics Corp. 


CORPORATE HEADQUARTERS: INFORMATION CONTACTS: 

NO. 4, Creation Rad, III Rongken Yang 

Science-Based Industrial Park Special Product Design Dept. | 
Hsinchu, Taiwan, R.O.C. TEL: 886-35-792632 

TEL: 886-35-770066 E-mail: rkyang@winbond.com.tw 


FAX: 886-35-792647 


Note: All data and specifications are subject to change without notice. 


67 


The above infeemistion is the exclusive intellectuel propeety of Winbond Electronics Corp. and shell not be disclosed, distributed or reproduced without permission from Winkond. 


W90210F 


Version 1.4, 10/8/97 


